Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133302e302f32332d3233203d3e20323632373239.roa
File:                     3138362e3139332e3133302e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          8kQgJx3T0olu4jj0xzsz6Nb5J/M0DVOXSjaFGekYBzU=
Subject key identifier:   DB:8B:09:1D:73:0B:72:8A:49:6F:86:39:0B:87:5C:47:34:92:E3:3B
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       42C80E0AF350A768AEF27721590D7E14805D2C0F
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133302e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 16 Jun 2025 14:10:46 +0000
ROA not before:           Mon 16 Jun 2025 14:05:46 +0000
ROA not after:            Mon 15 Jun 2026 14:10:46 +0000
asID:                     262729
IP address blocks:        186.193.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 14:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c8:0e:0a:f3:50:a7:68:ae:f2:77:21:59:0d:7e:14:80:5d:2c:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jun 16 14:05:46 2025 GMT
            Not After : Jun 15 14:10:46 2026 GMT
        Subject: CN=DB8B091D730B728A496F86390B875C473492E33B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ba:6a:7c:9d:91:8a:66:62:f3:a7:e4:d2:7b:
                    2d:53:21:46:33:e5:f1:9d:2c:ef:d6:88:e6:65:8b:
                    63:9d:e3:8c:bb:8a:00:ea:45:81:e1:6c:01:8f:dd:
                    53:f4:7e:1f:e9:9e:53:ae:34:9c:b2:ee:f2:a2:c0:
                    23:4f:84:8a:96:da:dd:83:31:6a:8d:a8:3c:b8:83:
                    57:3a:7d:dd:34:4b:d0:ff:89:ff:b3:bd:35:7d:5e:
                    98:03:e2:d2:d7:a2:a2:3a:b0:c3:2c:93:5d:55:de:
                    34:55:77:4e:8b:92:2d:7a:24:99:59:2b:4b:28:5c:
                    d2:55:d5:90:64:55:68:50:f8:22:ad:ca:32:52:56:
                    95:dc:82:c8:c6:0e:81:0a:71:1d:3d:e7:c6:3b:81:
                    1e:f4:42:18:5e:9b:19:86:94:59:be:58:43:03:ee:
                    ca:52:85:e8:82:6d:e4:76:a8:d0:95:3d:bd:44:ee:
                    1b:9a:a6:0e:fd:4b:26:f7:ef:9b:4c:f2:95:df:08:
                    eb:15:4f:f3:ca:07:c4:95:46:69:55:1a:37:fe:ee:
                    db:e2:82:cb:70:5b:24:c9:f0:68:1f:79:c5:57:9d:
                    b4:1a:3f:e6:ae:ab:10:3b:88:ec:96:12:20:d9:0b:
                    79:d3:90:47:89:b3:4d:1e:0c:2e:d1:38:e3:f1:0d:
                    57:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8B:09:1D:73:0B:72:8A:49:6F:86:39:0B:87:5C:47:34:92:E3:3B
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133302e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:07:8b:f6:c3:cc:05:44:0b:29:49:5f:76:2a:83:a3:09:e3:
         0d:3e:33:d1:dc:47:8f:e0:9b:c2:ec:0d:f8:ed:ae:1a:28:b9:
         ef:82:cd:e2:86:22:b3:62:49:31:5f:b3:8f:75:9b:fe:2d:fd:
         28:fb:ca:3b:8a:b0:30:d7:82:74:1b:cf:a4:90:d4:d5:6e:c9:
         48:4c:ef:1a:91:12:d7:48:d0:e7:e1:2c:b6:d2:00:a2:b7:17:
         de:bf:bb:74:12:c4:db:1f:7b:58:03:2d:5d:f7:63:61:0e:e1:
         76:7b:9d:ad:a7:50:c5:f6:97:21:d4:2f:8d:35:e6:9a:97:0b:
         7c:7d:d6:15:df:ce:54:82:a7:46:84:08:84:e2:0c:2e:dc:e7:
         e6:18:94:dc:7a:4c:91:d8:30:e8:1a:17:64:c9:a4:71:ce:79:
         1c:45:d0:ca:e3:58:40:0d:c4:e8:f2:54:3f:a6:50:82:7c:11:
         14:76:fb:2f:77:f3:ca:da:7d:25:1d:64:23:e0:f9:9a:04:8e:
         e5:07:52:38:76:ca:c2:69:a8:f1:0c:9f:2d:4c:c1:b1:a2:9e:
         d0:9c:4a:2d:8f:05:c6:21:a6:9d:27:7e:cb:8e:9a:3a:a9:b1:
         8b:44:4d:cc:31:e1:12:e7:f6:75:c9:3f:51:40:25:2d:c8:e3:
         bc:93:e0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 03:02:13 2025 by rpki-client